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(54) METHOD AND DEVICE FOR MUTUAL AUTHENTICATION 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a mutual authentication suitable for a 
device of low arithmetic capacity. 

SOLUTION: A testifier 101 generates a commitment (w) and sends it to a verifier 
111, The verifier 1 1 1 sends challenges S, U and r to the testifier 101 and 
calculates an index g=h(r', ^ ) for verification while using a unidirectional hash 
function (h) shared with the testifier 101. The testifier 101 verifies S while using 
disclosed information, further generates an index g-h(r', JJt ) for verification while 
using r', ^ and (h), generates response generation information y'<rF(d, L, It)g' mod 
n while using a unidirectional hash function F shared with a center 121, further 
generates a response y = y'tg' mod n while using the index g' for verification and 
sends it to the verifier 111. The verifier 1 1 1 generates verification information 
w' = JAgEyv mod n while using disclosed testifier information JA or the like of the 
testifier 101 and compares it with the commitment (w). 
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